Tails OS: The Complete Setup & Usage Guide for 2026

1. What Is Tails OS?

Tails (The Amnesic Incognito Live System) is a security-focused Linux distribution designed to protect your privacy and anonymity. Unlike a normal operating system installed on your hard drive, Tails runs entirely from a USB drive and leaves no trace on the computer when you shut it down. Every session starts fresh — no history, no cookies, no files, no evidence of what you did.

Tails is developed by a nonprofit organization and has been actively maintained since 2009. It is used by journalists, whistleblowers, activists, and privacy-conscious individuals around the world. Edward Snowden famously used Tails to communicate with journalists when leaking NSA documents in 2013.

2. How Tails Works

When you boot a computer from a Tails USB drive, Tails loads entirely into RAM — the computer's temporary memory. It does not read from or write to the computer's internal hard drive at any point. When you shut down, RAM is wiped, and the session disappears.

All network traffic is automatically routed through the Tor network. There is no configuration required — Tails enforces this at the operating system level. Applications that try to bypass Tor are blocked. Even if an application is compromised, it cannot easily leak your real IP address.

Tails includes a pre-configured set of privacy tools: Tor Browser, the Thunderbird email client with OpenPGP support, KeePassXC password manager, OnionShare for anonymous file sharing, and the Electrum Bitcoin wallet.

3. What Tails Protects Against

• Local forensics — If someone seizes the computer you used, they find no evidence of your Tails session. Your activity existed only in RAM.
• Network surveillance — All traffic goes through Tor. Your ISP sees only that you connected to the Tor network, not what you did.
• Website tracking — Websites see a Tor exit node IP, not yours. Tails also uses Tor Browser configured to minimize fingerprinting.
• Malware persistence — Malware cannot persist between Tails sessions. Each boot is a clean slate. (Note: malware can still run within a session.)
• Compromised host OS — If the computer's installed OS has malware, Tails bypasses it entirely by running from its own environment.

4. What Tails Does NOT Protect Against

Understanding Tails' limitations is as important as understanding its strengths.

• BIOS/firmware attacks — Sophisticated attackers can compromise computer firmware below the OS level. Tails cannot protect against this. Use your own hardware when possible.
• Your own behavior — Logging into personal accounts, providing identifying information, or using real names destroys anonymity regardless of Tails. OPSEC failures are the most common way anonymity is broken.
• Hardware keyloggers — A physical keylogger attached to the keyboard captures keystrokes before Tails can protect them.
• Global traffic correlation — A nation-state adversary who can observe both your entry into Tor and the exit node traffic can potentially correlate them. This is the same limitation as using Tor Browser alone.
• Persistent storage errors — If you enable Persistent Storage and store sensitive files, those files remain on the USB. Handle Persistent Storage carefully.

5. How to Install Tails

You need: a USB drive of at least 8 GB (all data will be erased), and a computer to download and verify Tails.

Step 1 — Download Tails

Download the Tails ISO from tails.boum.org. This is the only official source. Do not download from any other site.

Step 2 — Verify the Download

Tails provides a cryptographic signature to verify the download was not tampered with. The download page includes instructions for your OS. Do not skip this step — fake Tails images containing malware have circulated online.

Step 3 — Flash to USB

Use the Tails installer (recommended) or balenaEtcher to write the Tails image to your USB drive. The Tails website provides platform-specific instructions for Windows, macOS, and Linux.

# Linux: flash using dd (replace sdX with your USB device)
$ sudo dd if=tails-amd64-6.x.img of=/dev/sdX bs=16M oflag=direct status=progress

# Verify USB device name first — wrong device destroys data
$ lsblk

Step 4 — Boot from USB

Restart the computer and access the boot menu (usually F12, F2, F10, or Esc depending on the manufacturer). Select the USB drive. Tails will boot into its welcome screen.

6. First Boot Walkthrough

On first boot, Tails shows the Welcome Screen where you can:

• Set the language and keyboard layout
• Set an Administration Password — required if you need to install additional software or perform admin tasks during the session. Leave it blank if you don't need it (more secure).
• Enable Unsafe Browser — a non-Tor browser for captive portals (hotel/airport Wi-Fi). Only enable this if you need it.
• Configure MAC address spoofing — enabled by default. This prevents your network card's hardware address from identifying you on local networks.

After clicking Start Tails, you reach the desktop. Tor connects automatically. A notification confirms when Tor is ready. Open Tor Browser from the desktop to begin browsing.

7. Persistent Storage

By default, Tails forgets everything. If you need to save files, passwords, or settings between sessions, you can enable Persistent Storage — an encrypted partition on the same USB drive.

Persistent Storage is encrypted with a passphrase you choose. It is unlocked optionally at the Welcome Screen — you can choose to start a session without unlocking it for maximum amnesia.

8. Tails vs VPN vs Tor Browser

Feature	Tails	Tor Browser	VPN
Routes traffic through Tor	✅ All traffic	✅ Browser only	❌
Leaves no trace on computer	✅	❌	❌
Protects against local forensics	✅	❌	❌
Works on any computer	✅ (via USB)	✅	✅
Easy to set up	Medium	Very easy	Easy
Protects non-browser traffic	✅	❌	✅

9. When to Use Tails

Tails is not necessary for everyday privacy. It is the right tool for specific high-risk situations:

• Using a shared or untrusted computer — library, internet café, a friend's computer. Tails bypasses whatever is installed on the machine.
• Communicating with journalists as a whistleblower — Tails was specifically designed for this use case and is recommended by SecureDrop.
• Accessing sensitive resources from a location that could be traced — Tails + Tor breaks the link between your physical location and your online activity.
• Situations where leaving no forensic trace is critical — domestic abuse survivors, activists in authoritarian countries, anyone for whom device seizure is a realistic risk.

For everyday browsing with privacy in mind, Tor Browser or a trusted VPN is sufficient and much more convenient. Reserve Tails for when the stakes are high enough to justify the extra friction.